Winter Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: geek65

AZ-800 Administering Windows Server Hybrid Core Infrastructure Questions and Answers

Questions 4

Task 10

You use a Group Policy preference to map \\dd.contoso.com\instal1 as drive H for all users. If a user already has an existing drive mapping for H. the new drive mapping must take precedence.

Options:

Buy Now
Questions 5

Task 4

You need to register SRV1 to sync Azure file shares The registration must use the 34646045 Storage Sync Service.

The required source files are located in a folder named \\dc1.contoso.com\install.

You do NOT need to configure file share synchronization at this time and you do NOT need to update the agent.

Options:

Buy Now
Questions 6

Task 6

You need to ensure that you can manage DC1 by using Windows Admin Center on SRV1.

The required source files are located in a folder named \\dc1.contoso.com\install.

Options:

Buy Now
Questions 7

Task 11

You need to ensure that all DHCP clients that get an IP address from SRV1 will be configured to use DC1 as a DNS server.

Options:

Buy Now
Questions 8

Task 3

You need to run a container that uses the mcr.microsoft.com/windows/servercore/iis image on SRV1. Pott 60 on the container must be published to port 5001 on SRV1 and the container must run in the background.

Options:

Buy Now
Questions 9

Task 12

You need to create a Group Policy Object (GPO) named GPO1 that only applies to a group named MemberServers.

Options:

Buy Now
Questions 10

Task 3

You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers.

Options:

Buy Now
Questions 11

Task2

You need to ensure that the Azure file share named share1 can sync to on-premises servers.

The required source files are located in a folder named \\dc1.contoso.com\install.

You do NOT need to specify the on-premises servers at this time.

Options:

Buy Now
Questions 12

Task 9

You need to ensure that all the computers in the domain use DNSSEC to resolve names in the adatum.com zone.

Options:

Buy Now
Questions 13

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

The domain controllers do NOT have internet connectivity.

You plan to implement Azure AD Password Protection for the domain.

You need to deploy Azure AD Password Protection agents. The solution must meet the following requirements:

• All Azure AD Password Protection policies must be enforced.

• Agent updates must be applied automatically.

• Administrative effort must be minimized.

What should you do? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 14

You have an Azure virtual machine named VM1 that contains the drives shown in the following table.

On VM1, you plan to install an app named App1. The data for App1 must be stored on a persistent data disk assigned to drive D.

You need assign the data disk to drive D.

What should you do on VM1 first?

Options:

A.

Change the drive letter of the Temporary Storage drive to F.

B.

Move pagefile.sys to the Operating System drive.

C.

Stop (deallocate) VM1.

D.

Expand the Temporary Storage drive.

Buy Now
Questions 15

You need to implement the planned change for Data1.

Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 16

Your network contains a Active Directory Domain Service (AD DS) forest named contoso.com. The forest root domain contains a server named server1. contoso.com.

A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains.

You need to ensure that only the members of a group named fabrikam\Group1 can authenticate to server1.contoso.com.

What should you do first?

Options:

A.

Change the trust to a one-way external trust.

B.

Add fabrikam\Group1 to the local Users group on server1.contoso.com.

C.

Enable SID filtering for the trust.

D.

Enable Selective authentication for the trust.

Buy Now
Questions 17

You have an on-premises server named Server1 that runs Windows Server. Server1 contains an app named App1 and a firewall named Firewall1.

You have an Azure subscription.

Internal users connect to App1 by using WebSockets.

You need to make App1 available to users on the internet. The solution must minimize the number of inbound ports open on Firewall 1.

What should you include in the solution?

Options:

A.

Microsoft Application Request Routing (ARR) Version 2

B.

Web Application Proxy

C.

Azure Relay

D.

Azure Application Gateway

Buy Now
Questions 18

You have four testing devices that are configured with static IP addresses as shown in the following table.

The test devices are turned on once a month.

You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort.

What should you do?

Options:

A.

Create an exclusion range.

B.

Create reservations.

C.

Configure the Scope options.

D.

Create a policy.

Buy Now
Questions 19

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.

You plan to store a DNS zone in a custom Active Directory partition.

You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.

What should you use?

Options:

A.

DNS Manager

B.

New-ADObjett

C.

dnscnd.exe

D.

Windows Admin Center

Buy Now
Questions 20

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant. The tenant contains a group named Group1 and the users shown in the following table.

Domain/OU filtering in Azure AD Connect is configured as shown in the Filtering exhibit. (Click the Filtering tab.)

You review the Azure AD Connect configurations as shown in the Configure exhibit. (Click the Configure tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 21

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You plan to implement self-service password reset (SSPR) in Azure AD.

You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.

What should you do?

Options:

A.

Deploy the Azure AD Password Protection proxy service to the on premises network.

B.

Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

C.

Grant the Change password permission for the domain to the Azure AD Connect service account.

D.

Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

Buy Now
Questions 22

You have a Windows Server container host named Server1 that has a single disk.

On Server1, you plan to start the containers shown in the following table.

Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 23

You have servers that run Windows Server 2022 as shown in the following table.

Server2 contains a .NET app named App1.

You need to establish a WebSocket connection from App1 to the SQL Server instance on Server!. The solution must meet the following requirements:

• Minimize the number of network ports that must be open on the on-premises network firewall.

• Minimize administrative effort.

What should you create first?

Options:

A.

an Azure Relay namespace

B.

an Azure VPN gateway

C.

a WFC relay connection

D.

a hybrid connection

Buy Now
Questions 24

You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope! that has the following configurations:

• Address range: 192.168.0.2 to 192.16B.1.2M . Mask 255.255.254.0

• Router: 192.168.0.1

• Lease duration: 3 days

• DNS server 172.16.0.254

You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.

You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.

What should you create?

Options:

A.

a policy

B.

a scope

C.

a fitter

D.

scope options

Buy Now
Questions 25

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The network contains the servers shown in the following table.

You plan to implement IP Address Management (IPAM).

You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 26

You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table.

You plan to create a virtual disk named VDisk1 that will use storage tiers. Which pools can you use to create VDisk1?

Options:

A.

Pool2 and Pool3 only

B.

Pool 2only

C.

Pool only

D.

Pool, Pool2, and Pool3

E.

Pool1 and Pool2 only

F.

Pool1 and Pool3 only

G.

Pool3 only

Buy Now
Questions 27

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

Options:

A.

Azure AD Connect

B.

a Group Policy Object (GPO)

C.

an Azure Resource Manager (ARM) template

D.

an Azure management group

Buy Now
Questions 28

You need to ensure that Automanage meets the technical requirements.

On which Azure virtual machines should you enable Automanage?

Options:

A.

Server1 only

B.

Server2 only

C.

Server1 and Server2 only

D.

Server2 and Server3 only

E.

Server1 and Server4 only

Buy Now
Questions 29

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

Options:

A.

Create an Azure private DNS zone named corp.fabhkam.com.

B.

Create a virtual network link in the coip.fabnkam.c om Azure private DNS zone.

C.

Create an Azure DNS zone named corp.fabrikam.com.

D.

Configure the DNS Servers settings for Vnet1.

E.

Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.

F.

On DC3, install the DNS Server role.

G.

Configure a conditional forwarder on DC3.

Buy Now
Questions 30

You need to configure Azure File Sync to meet the file sharing requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Options:

Buy Now
Questions 31

You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?

Options:

A.

Hybrid Azure AD join all the servers.

B.

Create a hybrid runbook worker m Azure Automation.

C.

Deploy the Azure Connected Machine agent to all the servers.

D.

Deploy the Azure Monitor agent to all the servers.

Buy Now
Questions 32

You need to meet the security requirements for passwords.

Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE Each correct selection is worth one point.

Options:

Buy Now
Questions 33

You need to meet technical requirements for HyperV1.

Which command should you run? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 34

DC1 fails.

You need to meet the technical requirements for the schema master.

Yourunntdsutil.exe.

Which five commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order?

Options:

Buy Now
Questions 35

Which two languages can you use for Task1? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Java

B.

Bicep

C.

JavaScript

D.

Python

E.

PowerShell

Buy Now
Questions 36

You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.

What should you implement?

Options:

A.

Microsoft Entra Connect cloud sync

B.

Active Directory Federation Services (AD FS)

C.

Microsoft Entra Connect in staging mode

D.

Microsoft Entra Connect in active mode

Buy Now
Questions 37

You need to ensure that VM3 meets the technical requirements.

What should you install first?

Options:

A.

Enhanced Storage

B.

File Server Resource Manager (FSRM)

C.

Windows Standards-Based Storage Management

D.

the iSNS Server service

Buy Now
Questions 38

You need to ensure that data availability on SSPace1 meets the technical requirements.

What is the maximum number of physical disks that can fail on each disk? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 39

You need to implement the planned changes for the Azure DNS Private Resolver.

Which private DNS zones can you use for name resolution?

Options:

A.

Zone1.com only

B.

Zone2.com only

C.

Zone1.com and Zone2.com only

D.

Zone2.com and Zone3.com only

E.

Zone1.com, Zone2.com, and Zone3.com

Buy Now
Questions 40

You need to implement the planned changes for Microsoft Entra users to sign in to Server1.

Which PowerShell cmdlet should you run?

Options:

A.

Add-ADComputerServiceAccount

B.

Set-AzVM

C.

Set-AzVMExtension

D.

New-ADComputer

Buy Now
Questions 41

Task 8

You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.

Options:

Buy Now
Questions 42

Task 7

You need to monitor the security configuration of DC1 by using Microsoft Defender for Cloud.

The required source files are located in a folder named \\dc1.contoso.com\install.

Options:

Buy Now
Questions 43

You need to meet the technical requirements for VM3

On which volumes can you enable Data Deduplication?

Options:

A.

D and E only

B.

C, D, E, and F

C.

D only

D.

D and E only

E.

D, E, and F only

Buy Now
Questions 44

You need to meet the technical requirements for User1. The solution must use the principle of least privilege.

What should you do?

Options:

A.

Add Users1 to the Server Operators group in contoso.com.

B.

Create a delegation on contoso.com.

C.

Add Users1 to the Account Operators group in contoso.com.

D.

Create a delegation on OU3.

Buy Now
Questions 45

You need to meet the technical requirements for VM2.

What should you do?

Options:

A.

Implement shielded virtual machines.

B.

Enable the Guest services integration service.

C.

Implement Credential Guard.

D.

Enable enhanced session mode.

Buy Now
Questions 46

You need to meet the technical requirements for Server4.

Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 47

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 48

Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Options:

Buy Now
Questions 49

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 50

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

Options:

A.

Admin1 only

B.

Admin3 only

C.

Admin1 and Admin3 only

D.

Admin1 Admin2. and Admm3

Buy Now
Questions 51

Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 52

You need to meet the technical requirements for the site links. Which users can perform the required tasks?

Options:

A.

Admin1 only

B.

Admin1 and Admin3 only

C.

Admin1 and Admin2 only

D.

Admin3 only

E.

Admin1, Adrrun2. and Admin3

Buy Now
Exam Code: AZ-800
Exam Name: Administering Windows Server Hybrid Core Infrastructure
Last Update: Jan 18, 2025
Questions: 235
AZ-800 pdf

AZ-800 PDF

$33.25  $94.99
AZ-800 Engine

AZ-800 Testing Engine

$38.5  $109.99
AZ-800 PDF + Engine

AZ-800 PDF + Testing Engine

$50.75  $144.99